Fortinet black logo

Handbook

Multicast IP range

6.0.0
Copy Link
Copy Doc ID 4afb0436-a998-11e9-81a4-00505692583a:234479
Download PDF

Multicast IP range

This type of address will allow multicast broadcasts to a specified range of addresses.

Creating a multicast IP range address

  1. Go to Policy & Objects > Addresses.
  2. Select Create New.If you use the down arrow next to Create New, select Address.
  3. Choose the Category, Multicast Address
  4. Input a Name for the address object.
  5. Select the Type,Multicast IP Range from the drop-down menu.
  6. Enter the value for the Multicast IP Range
  7. Select the Interface from the drop-down menu.
  8. Enable the Show in Address List function
  9. Input any additional information in the Comments field.
  10. Press OK.

Example: Multicast IP range address

The company has a large high tech campus that has monitors in many of its meeting rooms. It is common practice for company wide notifications of importance to be done in a streaming video format with the CEO of the company addressing everyone at once.

The video is High Definition quality so takes up a lot of bandwidth. To minimize the impact on the network the network administrators have set things up to allow the use of multicasting to the monitors for these notifications. Now it has to be set up on the FortiGate firewall to allow the traffic.

  1. Go to Policy & Objects> Objects > Addresses and select Create New > Address.
  2. Fill out the fields with the following information:

    Category Multicast Address
    Name Meeting_Room_Displays
    Type Multicast IP Range
    Multicast IP Range 239.5.5.10-239.5.5.200
    Interface port9
    Show in Address List <enable>
    Comments <Input into this field is optional>
  3. Select OK.
  4. Enter the following CLI command:

    config firewall multicast-address

    edit "meeting_room_display"

    set type multicastrange

    set associated-interface "port9"

    set start-ip 239.5.5.10

    set end-ip 239.5.5.200

    set visibility enable

    end

  5. To verify that the address range was added correctly, go to Policy & Objects> Objects > Addresses. Check that the addresses have been added to the address list and that they are correct.
  6. Enter the following CLI command:

    config firewall multicast-address

    edit <the name of the address that you wish to verify>

    Show full-configuration

Multicast IP range

This type of address will allow multicast broadcasts to a specified range of addresses.

Creating a multicast IP range address

  1. Go to Policy & Objects > Addresses.
  2. Select Create New.If you use the down arrow next to Create New, select Address.
  3. Choose the Category, Multicast Address
  4. Input a Name for the address object.
  5. Select the Type,Multicast IP Range from the drop-down menu.
  6. Enter the value for the Multicast IP Range
  7. Select the Interface from the drop-down menu.
  8. Enable the Show in Address List function
  9. Input any additional information in the Comments field.
  10. Press OK.

Example: Multicast IP range address

The company has a large high tech campus that has monitors in many of its meeting rooms. It is common practice for company wide notifications of importance to be done in a streaming video format with the CEO of the company addressing everyone at once.

The video is High Definition quality so takes up a lot of bandwidth. To minimize the impact on the network the network administrators have set things up to allow the use of multicasting to the monitors for these notifications. Now it has to be set up on the FortiGate firewall to allow the traffic.

  1. Go to Policy & Objects> Objects > Addresses and select Create New > Address.
  2. Fill out the fields with the following information:

    Category Multicast Address
    Name Meeting_Room_Displays
    Type Multicast IP Range
    Multicast IP Range 239.5.5.10-239.5.5.200
    Interface port9
    Show in Address List <enable>
    Comments <Input into this field is optional>
  3. Select OK.
  4. Enter the following CLI command:

    config firewall multicast-address

    edit "meeting_room_display"

    set type multicastrange

    set associated-interface "port9"

    set start-ip 239.5.5.10

    set end-ip 239.5.5.200

    set visibility enable

    end

  5. To verify that the address range was added correctly, go to Policy & Objects> Objects > Addresses. Check that the addresses have been added to the address list and that they are correct.
  6. Enter the following CLI command:

    config firewall multicast-address

    edit <the name of the address that you wish to verify>

    Show full-configuration